Chương IV Thông tư 20/2017/TT-BTTTT: Biện pháp bảo đảm thực hiện ứng cứu sự cố an toàn thông tin mạng

Chapter IV

SOLUTIONS FOR ASSURING RESPONSE TO CYBER INFORMATION SECURITY INCIDENTS

Article 12. Developing and implementing cyber information security incident response plans

1. Agencies, organizations, and enterprises shall develop and implement cyber information security incident response plans of their agencies, organizations, and enterprises, in which:

a) In regard to information systems with approved classification of level 4, level 5 or information systems under the List of information systems of national importance, conform to Scheme for responding to cyber information security incidents under Article 16 of Decision No. 05/2017/QD-TTg.

b) In regard to information systems not specified under Point a Clause 1 of this Article, conform to Appendix III attached hereto.

2. Entities presiding information systems and competent agencies, authorities approving incident response plans shall identify conditions and order of priority in order to maintain operation of information system when deploying incident response and consider this a requirement in incident response plan.

3. National coordinating authority shall provide guidelines on developing and implementing incident response plans, implementing response provision, dealing with cyber information security incidents; organizing regional, sectoral, national, and international trainings and drills; developing plans and organizing periodic inspection, evaluation of implementation of cyber information response plans of ministries, central departments, local governments, organizations and enterprises.

Article 13. Expenditure

Expenditure on coordinating and responding to nation-wide cyber information security incidents shall conform to Article 17 of Decision No. 05/2017/QD-TTg and relevant guiding documents.